{"id":3651,"date":"2019-10-11T09:11:25","date_gmt":"2019-10-11T07:11:25","guid":{"rendered":"https:\/\/www.maintenance-wordpress.online\/?p=3651"},"modified":"2019-10-11T09:12:33","modified_gmt":"2019-10-11T07:12:33","slug":"vulnerabilite-wordpress-octobre-2019","status":"publish","type":"post","link":"https:\/\/maintenance-cms-wp.fr\/articles\/vulnerabilite-wordpress-octobre-2019\/","title":{"rendered":"Vuln\u00e9rabilit\u00e9 WordPress Octobre 2019"},"content":{"rendered":"

Derni\u00e8res failles de s\u00e9curit\u00e9 plugins et th\u00e8mes WordPress<\/h2>\n

Il faut rapidement, \u00a0v\u00e9rifier les mises \u00e0 jour de ces plugins\/th\u00e8mes. Si aucune mise \u00e0 jour, vous devez les supprimer de votre installation WordPress !<\/strong><\/span><\/p>\n

Failles WordPress :<\/strong><\/p>\n

    \n
  1. WordPress\u00a05.2.2 – Cross-Site Scripting (XSS) in URL Sanitisation<\/li>\n
  2. WordPress 5.2.2 – Authenticated Cross-Site Scripting (XSS) in Post Previews<\/li>\n
  3. WordPress 5.2.2 – Cross-Site Scripting (XSS) in Dashboard<\/li>\n
  4. WordPress 5.2.2 – Cross-Site Scripting (XSS) in Shortcode Previews<\/li>\n
  5. WordPress 5.2.2 – Cross-Site Scripting (XSS) in Stored Comments<\/li>\n
  6. WordPress 5.2.2 – Potential Open Redirect<\/li>\n
  7. WordPress 3.9-5.1 – Comment Cross-Site Scripting (XSS)<\/li>\n<\/ol>\n

    Th\u00e8mes WordPress :<\/strong><\/p>\n

      \n
    1. Nexos – Real Estate 1.6 – SQL Injection & Persistent XSS<\/li>\n
    2. Selio – Real Estate Directory 1.1 – SQL Injection & Persistent XSS<\/li>\n
    3. Real Estate 7 \u00a02.9.0 – Stored XSS & IDOR<\/li>\n
    4. Zoner – Real Estate 4.1 – Reflected & Stored XSS<\/li>\n
    5. Traveler – Travel Booking WordPress Theme 2.7.1 – Reflected & Stored XSS<\/li>\n
    6. JobCareer | Job Board Responsive WordPress Theme 2.5 – Stored XSS<\/li>\n
    7. CarSpot Theme 2.1.6 – Authenticated Stored XSS<\/li>\n
    8. Newspaper Theme \u00a09.2.2 – Cross-Site Scripting (XSS)<\/li>\n
    9. JobCareer | Job Board Responsive WordPress Theme \u00a02.4 – User enumeration & Reset password<\/li>\n<\/ol>\n

      Plugins WordPress :<\/strong><\/p>\n

        \n
      1. All In One WP Security & Firewall 4.4.1 – Open Redirect & Hidden Login Page Exposure<\/li>\n
      2. Export Users to CSV \u00a01.4 – Unauthorised CSV Access<\/li>\n
      3. Download Plugins and Themes from Dashboard \u00a01.5.0 – Unauthenticated Stored XSS<\/li>\n
      4. Theme Editor \u00a02.1 – Multiple Vulnerabilities<\/li>\n
      5. Visualizer 3.3.1 – Blind SSRF<\/li>\n
      6. Visualizer 3.3.1 – Stored XSS<\/li>\n
      7. GiveWp 2.5.5 – Authentication Bypass<\/li>\n<\/ol>\n

        La maintenance de votre site WordPress permet des mises \u00e0 jour r\u00e9guli\u00e8res afin d\u2019\u00e9viter les bugs et les probl\u00e8mes de piratage.<\/h4>\n

        Nous solutions de maintenance WordPress \u00e0 partir de 19\u20ac ht\/ mois\u00a0<\/a><\/p>\n

         <\/p>\n","protected":false},"excerpt":{"rendered":"

        Derni\u00e8res failles de s\u00e9curit\u00e9 plugins et th\u00e8mes WordPress Il faut rapidement, \u00a0v\u00e9rifier les mises \u00e0 jour de ces plugins\/th\u00e8mes. Si aucune mise \u00e0 jour, vous…<\/p>\n","protected":false},"author":2,"featured_media":3654,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","footnotes":""},"categories":[31,49,32,30],"tags":[],"class_list":["post-3651","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-plugins","category-themes","category-vulnerabilite","category-wordpress"],"_links":{"self":[{"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/posts\/3651","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/comments?post=3651"}],"version-history":[{"count":0,"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/posts\/3651\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/media\/3654"}],"wp:attachment":[{"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/media?parent=3651"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/categories?post=3651"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/maintenance-cms-wp.fr\/articles\/wp-json\/wp\/v2\/tags?post=3651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}